ADR	标题	状态
ADR-0001	Run 状态模型与事务边界	Proposed
ADR-0002	Legacy Crontab 兼容、影子写入与切换策略	Proposed
ADR-0003	Executor 端口与 LocalProcessExecutor	Proposed
ADR-0004	SQLite/PostgreSQL Repository、驱动与 Migration 策略	Proposed
ADR-0005	Durable Cancellation Dispatch、Lease 与 Fencing	Proposed
ADR-0006	Node.js 24 与多架构支持分层	Proposed
ADR-0007	LocalProcess completion receipt 与日志存活	Proposed
ADR-0012	Remote Worker Session、能力放置与 Fencing	Proposed
ADR-0013	Remote Run 启动确认、Lease Fencing 与启动失败	Proposed
ADR-0014	有界 Dispatcher 与 Claimed Execution Offer	Proposed
ADR-0021	Worker Execution Offer Inbox 与启动崩溃恢复	Proposed
ADR-0022	Pinned Task Revision 与本地执行计划物化	Proposed
ADR-0023	不可变 Task Execution Revision 存储	Proposed
ADR-0024	Local Context、Secret 与 Artifact 边界	Proposed
ADR-0025	加密本地 SecretStore 与版本化密文	Superseded
ADR-0026	本地 Artifact 硬配额、磁盘水位与可恢复 Retention	Proposed
ADR-0027	Artifact 读取授权与本地有界 Range Contract	Proposed
ADR-0028	Project Identity、版本化 RBAC 与默认拒绝 Policy Core	Proposed
ADR-0029	首 Owner 一次性 Bootstrap 与认证主体边界	Proposed
ADR-0030	Legacy Panel 认证与稳定 User Identity	Proposed
ADR-0031	ApprovalRequest 与 Durable Action Dispatch	Proposed
ADR-0032	Approved Action Dispatch 执行租约与 Start Barrier	Proposed
ADR-0033	Approved Action 恢复证据与人工裁决	Proposed
ADR-0034	Approved Run Action 原子回执	Proposed
ADR-0035	Approved Action 人工恢复授权	Proposed
ADR-0036	Approved Action Profile-aware Runtime Lifecycle	Proposed
ADR-0037	PostgreSQL Cluster-control 存储孵化与跨方言契约	Proposed
ADR-0038	Cluster Driver 独立交付与 PostgreSQL 依赖基线	Proposed
ADR-0039	PostgreSQL Schema Capability 与 Runtime Readiness	Proposed
ADR-0040	Profile 激活顺序与 Edge 导入隔离	Proposed
ADR-0041	PostgreSQL Run Repository 契约对等	Proposed
ADR-0042	Profile 专属产物与 Package 依赖方向	Proposed
ADR-0043	PostgreSQL Migration、Typed Schema 与 Catalog 权威边界	Proposed
ADR-0044	Runtime Core 抽离与 Legacy 兼容副本退出	Proposed
ADR-0045	Cluster HTTP Readiness、Admission 与 Drain	Proposed
ADR-0046	Cluster 两阶段安全 Admission	Proposed
ADR-0047	PostgreSQL Project Policy 与 RoleBinding Fence	Proposed
ADR-0048	Cluster 受审 Route Registry 与授权输入边界	Proposed
ADR-0049	Cluster API Credential 与 Durable Security Audit	Proposed
ADR-0050	Cluster Administration Authority 与 Mutation Ledgers	Proposed
ADR-0051	Cluster Authentication Overload Shield	Proposed
ADR-0052	Cluster Run Read API Contract	Proposed
ADR-0053	Cluster Startup Recovery Source 与 Convergence Gate	Proposed
ADR-0054	Cluster Recovery Claim、Fencing 与有界 Supervisor	Proposed
ADR-0055	Cluster Recovery Evidence 与 Fenced Lost Transition	Proposed
ADR-0056	Cluster Recovery Provider Registry 与 Bootstrap-Owned Convergence	Proposed
ADR-0057	PostgreSQL Worker Session 与 Run Lease Authority	Proposed
ADR-0058	Authenticated Worker Ingress 与 Execution Attestation	Proposed
ADR-0059	Worker Ingress Mutual TLS 与部署边界	Proposed
ADR-0060	Worker Certificate Lifecycle 与原子信任重载	Proposed
ADR-0061	Worker 本地证书身份与显式续期	Proposed
ADR-0062	Profile 漏洞归属与 Legacy 依赖树治理	Proposed
ADR-0063	本机 SQLite 存储权威与 Profile 产物边界	Proposed
ADR-0064	2.x SQLite 旁路孵化、恢复点与显式切换	Proposed
ADR-0065	持久化本机应用切换 Supervisor 与未知结果收敛	Proposed
ADR-0066	本机 Application 激活门与反向停止顺序	Proposed
ADR-0067	SQLite 事实驱动的本机 Run 启动恢复预检	Superseded
ADR-0068	回执优先、进程身份感知的本机 Run 启动恢复	Proposed
ADR-0069	持久化本机进程启动屏障与数据库索引回执清理	Proposed
ADR-0070	本机 Run 原子启动协调与耐久身份补偿	Proposed
ADR-0071	有界本机调度、执行计划物化与 Artifact Admission	Proposed
ADR-0072	统一的本机执行完成、取消、超时与停机生命周期	Proposed
ADR-0073	Node SQLite 加密本机 SecretStore 与 Keyring 生命周期	Proposed
ADR-0074	授权的本机 Secret 管理与原子安全审计	Proposed
ADR-0075	本机稳定 Identity 与首 Owner Bootstrap Ceremony	Proposed
ADR-0076	共享本机 SQLite 操作权与稳定 Identity Credential 认证	Proposed
ADR-0077	短生命周期本机 Identity Provisioning 与首 Owner 原子建权	Proposed
ADR-0078	POSIX 本机 Owner Console 证明与 Secret 交付门禁	Proposed
ADR-0079	本机 Owner Secret 分阶段交付与崩溃恢复	Proposed
ADR-0080	本机 Owner Pepper Provision、备份与轮换边界	Proposed
ADR-0081	摘要绑定的 Owner Secret 确认与无密钥重放	Superseded
ADR-0082	SQLite Owner Delivery 确认账本与瞬时文件桥梁	Proposed
ADR-0083	版本化 Owner Pepper Keyring 与 Credential Recovery	Proposed
ADR-0084	版本化 Owner Delivery Acknowledgement 压缩与重放 Tombstone	Proposed
ADR-0085	私有持久命令文件驱动的 Local Owner GC CLI	Proposed
ADR-0086	私有命令文件驱动的 Local Owner 产品 CLI	Proposed
ADR-0087	Package 粒度与拓扑构建边界	Proposed
ADR-0088	Linux 资源档位与物理设备证据边界	Accepted
ADR-0089	版本化 TaskDefinition 存储与物理规模证据	Accepted
ADR-0090	Production Package Packlist 与开发 Map 排除	Accepted
ADR-0091	不可变 TaskSpec 语义注册表与 Command v1	Accepted
ADR-0092	Pinned Command TaskDefinition 执行编译	Accepted
ADR-0093	本机 Execution Revision 摘要与原子发布	Accepted
ADR-0094	版本化 Trigger 与固定任务修订绑定	Accepted
ADR-0095	有界 Legacy Crontab adoption 分类与内容绑定计划	Accepted
ADR-0096	强认证且有界的 Legacy adoption 决策回执	Accepted
ADR-0097	私有且可认证的 Legacy adoption 决策文件	Accepted
ADR-0098	Policy 围栏下的原子 Legacy Task adoption	Accepted
ADR-0099	专用 Legacy adoption decision issuer keyring	Accepted
ADR-0100	私有流式 Legacy adoption review-file 与签发 CLI	Accepted
ADR-0101	重新认证且受 Policy 围栏约束的 adoption commit CLI	Accepted
ADR-0102	物理 Edge Legacy adoption 规模证据协议	Accepted
ADR-0103	有界本机 Cron 调度与 Run 原子准入	Accepted
ADR-0104	PostgreSQL 不可变 Task、Trigger 与远端执行修订	Accepted
ADR-0105	PostgreSQL 行租约 Cluster Scheduler 与 Run 原子准入	Accepted
ADR-0106	Profile 构建入口 Subpath 收敛	Accepted
ADR-0107	PostgreSQL 权威 Cluster Scheduler 时钟	Accepted
ADR-0108	Worker Pull Placement 与摘要化 Execution Offer	Accepted
ADR-0109	PostgreSQL Remote Run 原子启动 ACK	Accepted
ADR-0110	认证 Worker Offer 传输与耐久准入	Accepted
ADR-0111	单一 Worker 执行 Inbox 与可判定 Spawn Barrier	Accepted
ADR-0112	版本化 Worker Activation Transport 与显式 Headless Lifecycle	Accepted
ADR-0113	有界 Worker Secret 与 Log Materialization	Accepted
ADR-0114	围栏化 Remote Worker 批量 Secret 交付	Accepted
ADR-0115	有界 Worker 文件 Log Artifact 与 Output Ownership	Accepted
ADR-0116	受审 Worker POSIX Executor 与 Upload-before-completion	Accepted
ADR-0117	流式 Remote Worker Artifact 与原子 Completion	Accepted
ADR-0118	Remote Worker Lease Control 与耐久 Timeout	Accepted
ADR-0119	受审 Production Cluster Control Route Composition	Accepted
ADR-0120	S3-Compatible Immutable Remote Worker Artifact Store	Accepted
ADR-0121	Production Worker Headless Execution Composition	Accepted
ADR-0122	单 Cadence Worker Session Product Lifecycle	Accepted
ADR-0123	Worker Production Credential Material Boundary	Accepted
ADR-0124	可恢复的 Worker Credential 交付确认与重叠轮换	Proposed
ADR-0125	PostgreSQL Failover Admission 与不确定提交边界	Proposed
ADR-0126	锁定的 Cluster 进程、镜像与 Kubernetes 部署基线	Accepted
ADR-0127	有界 PostgreSQL 私有 CA 文件绑定	Accepted
ADR-0128	精确 Cluster 镜像 SBOM 与证明化多架构发布	Accepted
ADR-0129	CloudNativePG Operator 与数据库角色权威	Accepted
ADR-0130	CloudNativePG Barman 备份与隔离恢复	Proposed
ADR-0131	Barman Plugin cert-manager 证书 Authority	Proposed
ADR-0132	有界 Plugin Package Manifest 与安装计划	Accepted
ADR-0133	不可变 Tool Registry 与 Policy-fenced Invocation Plan	Accepted
ADR-0134	内容寻址 PackageLock 与可恢复安装状态	Accepted
ADR-0135	确定性签名 Plugin Bundle 与私有本地 Staging	Accepted
ADR-0136	SQLite Plugin Package 安装仓库与 Head CAS	Accepted
ADR-0137	PostgreSQL Plugin Package 安装仓库与 Project Lock Authority	Accepted
ADR-0138	耐久 Plugin Package Lock 与精确本地激活	Accepted
ADR-0139	Kubernetes Plugin Package Active Pointer CAS	Accepted
ADR-0140	有界 Plugin Package 启动恢复与准入门禁	Accepted
ADR-0141	Profile-neutral Approved Action 与 Package 准入边界	Accepted
ADR-0142	认证后 Plugin Package 管理 Facade 与 Profile Ceremony	Accepted
ADR-0143	私有认证 Local Plugin Package CLI	Accepted
ADR-0144	Cluster Plugin Package 管理 Transport 与双 Authority 边界	Proposed
ADR-0145	有界 Cluster Plugin Package 管理 Host 与可选部署	Accepted
ADR-0146	PostgreSQL Durable Plugin Package 管理配额	Accepted
ADR-0147	PostgreSQL 持久 Plugin Package 身份 keyset ledger	Accepted
ADR-0148	Plugin Package 管理 Live Evidence 与默认拒绝 Egress	Accepted
ADR-0149	原子 Plugin Package Resource Generation Identity	Accepted
ADR-0150	有界 Plugin Package 语义物化	Accepted
ADR-0151	SQLite/PostgreSQL 不可变 Plugin Package 物化修订仓库	Accepted
ADR-0152	Generation 绑定的原子 Plugin Package Task Reconciliation	Accepted
ADR-0153	有界的生产 Plugin Package Task 发布与启动恢复	Accepted
ADR-0154	Project-scoped 不可变 Tool Definition Snapshot	Accepted
ADR-0155	Snapshot-bound Trusted Tool Handler 与执行准入	Accepted
ADR-0156	耐久 StepRun Aggregate 与 Run Fence	Accepted
ADR-0157	有界 Tool Execution Trace 与 Audit Evidence	Accepted
ADR-0158	同事务 Tool Execution Start Barrier	Accepted
ADR-0159	不透明 Tool Invocation 与脱敏 Preview Artifact	Accepted
ADR-0160	SQLite/PostgreSQL 不可变 Tool Invocation Artifact 仓库	Accepted
ADR-0161	Tool Execution Start 与 Artifact 的不可变绑定	Accepted
ADR-0162	首个 Trusted Built-in Run Read Tool Adapter	Accepted
ADR-0163	原子加密 Tool 成功完成协议	Accepted
ADR-0164	Trusted Tool 成功协调器与 Profile 存储装配	Accepted
ADR-0165	Trusted Tool 失败与超时终态完成协议	Accepted
ADR-0166	Trusted Tool Result Key Catalog 与 Completion Fence	Accepted
ADR-0167	可选、受预算约束的 AI Model Gateway	Accepted
ADR-0168	Durable ModelInvocation 与 StepRun Fence	Accepted
ADR-0169	Project-bound AI Provider Credential Binding 与可清零 Secret Material	Accepted
ADR-0170	Durable Model Usage Ledger 与有界 Project Accounting	Accepted
ADR-0171	原子 Project Model Quota Reservation 与 Settlement	Accepted
ADR-0172	不可变 Model Price Quote 与 Canonical Cost Settlement	Accepted
ADR-0173	耐久 Model Price Catalog 发布、激活与撤销	Accepted
ADR-0174	授权型 Model Price Catalog 管理 facade	Accepted
ADR-0175	私有认证 Local Model Price Catalog CLI	Accepted
ADR-0176	显式 Local AI Feature 启用与非破坏性停用	Accepted
ADR-0177	Active Head 驱动的本机 AI Application Composition	Accepted
ADR-0178	Concrete Local Headless Application Process	Accepted
ADR-0179	Materialized Local Plugin Package Recovery Catalog	Accepted
ADR-0180	Authenticated Local Plugin Package Recovery Catalog Publication	Accepted
ADR-0181	Immutable Package Signature Time and Local Publisher Trust Overlap Rotation	Accepted
ADR-0182	Safe Local Plugin Package Publisher Key Retirement	Accepted
ADR-0183	Emergency Local Plugin Package Publisher Key Revocation	Accepted
ADR-0184	本机 Plugin Package 离线隔离与能力撤出	Accepted
ADR-0185	Workspace Package 边界审计与最小 Profile 交付梯度	Accepted
ADR-0186	Cluster PostgreSQL Plugin Package 隔离与能力撤出	Accepted
ADR-0187	Cluster Plugin Package 发布者 Provenance 与撤销影响集	Accepted
ADR-0188	Cluster 持久发布者 Trust Authority 与受批撤销	Accepted
ADR-0189	Cluster Effective Publisher Trust Material Binding	Accepted
ADR-0190	Cluster Approved Publisher Trust Overlap Add 与 Safe Retire	Proposed
ADR-0191	私有 Cluster Plugin Package 管理 Client	Accepted
ADR-0192	Kubernetes 私有管理 Tunnel Client	Accepted
ADR-0193	Fresh Local Profile Setup 与 Application	Accepted
ADR-0194	可重放的本机部署准备	Accepted
ADR-0195	AI-excluded 本机 Application 镜像	Accepted
ADR-0196	本机镜像证明化多架构发布契约	Accepted
ADR-0197	Generation CAS 本机 Compose 镜像选择	Accepted
ADR-0198	Digest-bound 本机 Compose Rollout Preflight	Accepted
ADR-0199	Generation-fenced 本机 Compose Rollout	Accepted
ADR-0200	本机 SQLite Rollout 写契约与升级前快照	Accepted
ADR-0201	显式、围栏化的本机 SQLite 恢复	Accepted
ADR-0202	显式、可重放的 Compose 恢复证据收集	Accepted
ADR-0203	物理 Edge Compose 存储恢复候选证据	Accepted
ADR-0204	物理 Edge Native Application 首次 Active 候选证据	Accepted
ADR-0205	物理 Edge Init-managed Service 首次 Active 候选证据	Accepted
ADR-0206	直连 Init-managed Release 与有界启动凭据	Accepted
ADR-0207	强认证 Local Secret 产品 CLI 与事务内 Credential Fence	Accepted
ADR-0208	强认证 Local Project Role Policy CLI 与防锁死交接	Accepted
ADR-0209	Owner 围栏化 Local Identity/Credential 管理与私有交付	Accepted
ADR-0210	Owner 围栏化 Local Identity/Credential 查询	Accepted
ADR-0211	Local Identity/Credential 的实例 Authority Project	Accepted
ADR-0212	Owner 围栏化 Local Project 生命周期	Accepted
ADR-0213	Owner 围栏化、有界的 Local Project 查询	Accepted
ADR-0214	Owner 围栏化、有界的 Local RoleBinding 查询	Accepted
ADR-0215	实例 Owner 围栏化、有界的 Local Security Audit 查询	Accepted
ADR-0216	实例 Owner 围栏化、有界的 Local Security Audit 诊断压缩	Accepted
ADR-0217	QingLong 3.0 workspace package 边界收敛	Accepted
ADR-0218	部署 Owner 持有的 Croner Provider 边界	Accepted
ADR-0219	固定 SemVer 运行时适配器边界	Accepted
ADR-0220	Plugin Package 当前安装清单查询	Accepted
ADR-0221	原子、可重放的 Plugin Package 生命周期 Overlay	Proposed
ADR-0222	按 generation 绑定的 Plugin Package 自动化发布账本	Proposed
ADR-0223	按 generation 绑定的 Plugin Package Workflow 执行计划	Proposed
ADR-0224	SQLite Plugin Package Workflow 原子准入	Proposed
ADR-0225	PostgreSQL Serializable Plugin Package Workflow 准入	Proposed
ADR-0226	有界 Plugin Package Workflow Frontier	Proposed
ADR-0227	Generation-bound Workflow Task Attempt 准入	Proposed
ADR-0228	有界 Plugin Package Workflow 整体取消收敛	Proposed
ADR-0229	Local Workflow Task 单 cadence 运行生命周期	Proposed
ADR-0230	Cluster Workflow 复用单一 Scheduler cadence	Accepted
ADR-0231	Worker ingress 复用 control 进程并注入 runtime capability port	Accepted
ADR-0232	Cluster runtime recovery 与 lost retry 复用单一 Scheduler cadence	Accepted
ADR-0233	Cluster Secret 使用 authority-gated mounted-files provider	Accepted
ADR-0234	单身份 Production Worker 进程与部署边界	Accepted
ADR-0235	Production Worker PostgreSQL 真实合约与 Session Transition 类型边界	Accepted
ADR-0236	Production Worker Run 纵切面与认证尝试预算	Accepted
ADR-0237	面向能力的依赖边界对账	Accepted
ADR-0238	Production Worker 证书续期单 Cadence 装配	Accepted
ADR-0239	Kubernetes Worker Generation Rollout 与 PVC 恢复边界	Accepted
ADR-0240	Kubernetes Worker Credential Staging 与短期最小 RBAC	Accepted
ADR-0241	Kubernetes Worker Credential TokenRequest Session	Accepted
ADR-0242	受批 Worker Credential 管理与一次性执行边界	Proposed
ADR-0243	删除无产品消费者的 Local Cutover 孵化包	Accepted
ADR-0244	按管理能力绑定身份断言用途	Accepted
ADR-0245	Worker 管理外部 OIDC 双用户 Ceremony 证据	Accepted
ADR-0246	Worker 管理持久审计的独立只读证据	Accepted
ADR-0247	Worker 管理业务路由的客户端证书边界	Accepted
ADR-0248	Worker 管理 PKI 吊销与滚动替换证据	Accepted
ADR-0249	Worker 管理客户端 CA 有界重叠与安全退休	Accepted
ADR-0250	Worker 管理客户端 CA 三阶段生产证据	Accepted
ADR-0251	Worker 管理吊销证据的双 PKI 信任域分离	Accepted
ADR-0252	Worker 管理统一 Release Evidence	Accepted
ADR-0253	私密 Worker 管理证据的镜像发布门	Accepted
ADR-0254	Digest 固定的跨架构 OS 漏洞发布门	Accepted
ADR-0255	Build-once Scanned OCI Digest Promotion	Accepted
ADR-0256	Owner-authenticated Local TaskDefinition Management	Accepted
ADR-0257	Profile 运行制品裁剪与分层 Import RSS 预算	Accepted
ADR-0258	Owner-authenticated Local Trigger 管理与 Current Task 围栏	Accepted
ADR-0259	用途隔离的 Cluster Automation Management 进程	Accepted
ADR-0260	Generation-bound、Content-free 的 Plugin Package Prompt 执行	Proposed
ADR-0261	显式加密的 Durable Plugin Package Prompt 输出 Artifact	Proposed
ADR-0262	Kubernetes Secret-backed Cluster Prompt 输出 Key Retirement	Accepted
ADR-0263	显式 Cluster AI 组合与 Provider Credential Authority	Accepted
ADR-0264	独立 Cluster Model Provider Credential 管理边界	Accepted
ADR-0265	有预算的一次性 Model Provider Credential Test Connection	Accepted
ADR-0266	Externally staged、resourceVersion-fenced 的 Cluster Prompt Output Active Key Rotation	Accepted
ADR-0267	机器可验证的 Workspace Package 边界账本	Accepted
ADR-0268	签名的外部 Prompt 输出密钥托管与恢复证明	Proposed
ADR-0269	Profile-aware Local SQLite Readiness 诊断边界	Accepted
ADR-0270	受认证的本机 Plugin Package Workflow 产品入口	Accepted
ADR-0271	受认证的 Cluster Plugin Package Workflow 产品入口	Accepted
ADR-0272	有界且授权原子的 Cluster Automation Inspection	Accepted
ADR-0273	本机 AI Provider Credential 产品 Authority	Accepted
ADR-0274	受认证的本机 Plugin Package Prompt 产品入口	Accepted
ADR-0275	受认证的 Cluster Plugin Package Prompt 产品入口	Accepted
ADR-0276	Package 内部领域目录与兼容 export 布局	Accepted
ADR-0277	本机 Plugin Package Workflow 取消产品入口	Accepted
ADR-0278	Profile 分层的 Linux Workflow 取消资源发布门	Accepted
ADR-0279	受认证的 Cluster Plugin Package Workflow 取消产品入口	Accepted
ADR-0280	Local SQLite Storage 与 Administration Composition 布局	Accepted
ADR-0281	同源绑定的跨架构 Linux 资源发布证据	Accepted
ADR-0282	受认证的本机 Plugin Package Workflow Run 查询	Accepted
ADR-0283	受认证的 Cluster Plugin Package Workflow Run 查询	Accepted
ADR-0284	有界且受认证的 Package-bound Workflow StepRun 列表	Accepted
ADR-0285	有界且受认证的 Package-bound Workflow RunEvent 时间线	Accepted
ADR-0286	有界且受认证的 Package-bound Workflow Run 历史列表	Accepted
ADR-0287	Content-free 的 Package Prompt 目录读取	Accepted
ADR-0288	按调用方 Request ID 精确读取 Content-free Package Prompt 执行状态	Accepted
ADR-0289	按执行 Request ID 恢复并读取 Durable Package Prompt 输出	Accepted
ADR-0290	Local SQLite Completion Receipt Journal 内部 Collaborator	Accepted
ADR-0291	Local SQLite Run Reader 内部模块	Accepted
ADR-0292	Local SQLite Run Persistence Support 内部模块	Accepted
ADR-0293	Local SQLite Security Authority Store 与 Run Facade 解耦	Accepted
ADR-0294	Local SQLite 领域中立 Persistence Primitives	Accepted
ADR-0295	浅层 Profile Package 的依赖防火墙证明	Accepted
ADR-0296	根入口行数棘轮与 Local Admin 领域入口	Accepted
ADR-0297	AI 根实现的领域归属与公开 Subpath 稳定性	Accepted
ADR-0298	Local SQLite 根 Runtime 与 Adoption 实现归属	Accepted
ADR-0299	Cluster Control 根 Composition 实现归属	Accepted
ADR-0300	Worker Runtime Application Composition 实现归属	Accepted
ADR-0301	Cluster Admin Runtime 与 Security Administration 实现归属	Accepted
ADR-0302	Local Owner Console Application Runtime 实现归属	Accepted
ADR-0303	Runtime Core 领域实现与基础设施端口归属	Accepted
ADR-0304	根 Public Export 纯转发证明与 Owner Command 实现归属	Accepted
ADR-0305	Local SQLite Run Facade 安全 Authority 兼容面退役	Accepted
ADR-0306	Local SQLite Run Runtime 最小能力投影	Accepted
ADR-0307	有界且诚实的本机部署持久状态	Accepted
ADR-0308	Local Application 启动模块内聚与 Profile 制品防火墙	Accepted
ADR-0309	部署侧 Legacy Silence Commitment 与 adopted v3 启动门	Accepted
ADR-0310	Docker Target 启动/重启屏障与人工终态	Accepted
ADR-0311	Local Owner Pepper Custody 的 Package 收敛	Accepted
ADR-0312	Local Profile Composition 的 Subpath 收敛	Accepted
ADR-0313	实例 Cutover Lineage 与双阶段人工恢复	Accepted
ADR-0314	Docker Target Stop 与写后 Reconciliation 证据	Accepted
ADR-0315	双阶段 Legacy Rollback Ceremony	Accepted
ADR-0316	AI Migration 方言归属与包内拆分	Accepted
ADR-0317	AI Migration Schema Group 归属	Accepted
ADR-0318	Local Publisher Trust Contract Seam	Accepted
ADR-0319	Local Publisher Trust Codec 与 Private Filesystem Store	Accepted
ADR-0320	Local Publisher Trust Lifecycle Ownership	Accepted
ADR-0321	Plugin Package Install 领域归属与 Package/Module 粒度	Accepted
ADR-0322	Trusted Tool Invocation 领域归属	Accepted
ADR-0323	Local SQLite Adoption 领域归属	Accepted
ADR-0324	Local Owner Secret Delivery 领域归属	Accepted
ADR-0325	Local Identity Credential Command 领域归属	Accepted
ADR-0326	Local Plugin Package Prompt Command 领域归属	Accepted
ADR-0327	Local Plugin Package Workflow Command 领域归属	Accepted
ADR-0328	Runtime Core Workflow Administration 领域归属	Accepted
ADR-0329	Local SQLite Identity Credential Administration 领域归属	Accepted
ADR-0330	Local Model Invocation Repository 领域归属	Accepted
ADR-0331	PostgreSQL Model Invocation Repository 领域归属	Accepted
ADR-0332	Local Plugin Package Prompt Admission Repository 领域归属	Accepted
ADR-0333	PostgreSQL Plugin Package Prompt Admission Repository 领域归属	Accepted
ADR-0334	Local Model Price Catalog Repository 领域归属	Accepted
ADR-0335	PostgreSQL Model Price Catalog Repository 领域归属	Accepted
ADR-0336	Model Price Catalog Management 领域归属	Accepted
ADR-0337	Plugin Package Prompt Execution 领域归属	Accepted
ADR-0338	PostgreSQL Model Provider Credential Test Connection 领域归属	Accepted
ADR-0339	PostgreSQL Plugin Package Prompt Application 领域归属	Accepted
ADR-0340	Model Invocation Protocol 领域归属	Accepted
ADR-0341	AI Profile Composition 领域归属	Accepted
ADR-0342	PostgreSQL Model Provider Credential Repository 领域归属	Accepted
ADR-0343	Plugin Package Prompt Output Artifact 协议归属	Accepted
ADR-0344	Model Provider Credential Test Connection 协议归属	Accepted
ADR-0345	Tool Registry 协议归属	Accepted
ADR-0346	有界本机 Runtime Artifact 裁剪	Accepted
ADR-0347	可选、受认证的本机 MCP Run 读取入口	Accepted
ADR-0348	有界、低敏的本机 MCP Run 事件诊断	Accepted
ADR-0349	有界、Project-scoped 的本机 MCP Run 发现	Accepted
ADR-0350	有界、低敏的本机 MCP Task 发现	Accepted
ADR-0351	MCP 单一消费者 Tool Projection 的包内归属	Accepted
ADR-0352	有界、低敏的本机 MCP Trigger 发现	Accepted
ADR-0353	有界、低敏的本机 MCP Approval 观察	Accepted
ADR-0354	精确、双授权的本机 MCP Approval 预览	Accepted
ADR-0355	强人类认证、摘要绑定的 Approval 决策产品门	Accepted
ADR-0356	可选、受认证且独立授权的 Cluster Approval 管理面	Accepted
ADR-0357	薄 Package 根目录与稳定 Export Map	Accepted
ADR-0358	最终运行制品的 Package Manifest 投影	Accepted
ADR-0359	Approval Management Kubernetes 多节点实证门	Accepted
ADR-0360	Production Worker Kubernetes Session 生命周期实证门	Accepted
ADR-0361	PostgreSQL HA 证据的私有持久发布与离线审计	Accepted
ADR-0362	systemd/OpenRC 双 Authority Service Bridge	Proposed
ADR-0363	有界 Application Shutdown Receipt 与物理 Service Stop 证据	Proposed
ADR-0364	Package 内部源码布局 Ratchet	Accepted
ADR-0365	有界统一 Local 产品 CLI	Accepted
ADR-0366	薄 Package 边界 Ratchet	Accepted
ADR-0367	单进程、受认证的 Local Run HTTP API	Proposed（实现完成，固定实机门待补）
ADR-0368	有界、Project-scoped 的 Run Discovery HTTP API	Proposed
ADR-0369	Profile 精确 Runtime Export 投影	Accepted
ADR-0370	有界、Project-scoped 的 RunEvent 时间线 HTTP API	Accepted
ADR-0371	有界、Project-scoped 的 Run StepRun HTTP 与 MCP API	Accepted
ADR-0372	两阶段认证的 Local Run Cancellation API	Proposed（Linux 组合门已完成，固定物理设备报告待补）
ADR-0373	Profile 可达的 Runtime JavaScript 投影	Accepted
ADR-0374	共享、有界的 Task Discovery HTTP API	Accepted
ADR-0375	共享的 current Task point-read API	Proposed（设计冻结，实现中）
ADR-0376	Policy 与 digest fenced 的 Task Start	Accepted
ADR-0377	Profile-aware Run Attempt 日志 Range 读取	Accepted
ADR-0378	Local Run Attempt 日志有界保留与 durable tombstone	Accepted
ADR-0379	Cluster Run Attempt 日志多副本保留与条件删除	Accepted
ADR-0380	Local lost Run retry 复用单一 execution-control cadence	Accepted
ADR-0381	强认证的 Local 手动 Run retry	Accepted
ADR-0382	PostgreSQL Cluster 手动 Run retry 原子 Authority	Accepted
ADR-0383	强认证的 Cluster Run Management Plane 与专用数据库角色	Accepted
ADR-0384	强认证的 Cluster Run Stop Management 与列级数据库权限	Accepted
ADR-0385	强认证的 Local Run Stop 产品入口与原子审计	Accepted
ADR-0386	Cluster Run Management Kubernetes 多节点实证	Accepted
ADR-0387	Local API Cancellation Linux 组合实证门	Accepted
ADR-0388	有界统一 Cluster Operator 产品 CLI	Accepted
ADR-0389	Owner-private Cluster Operator Context	Accepted
ADR-0390	Offline Cluster Operator Context Preflight	Accepted
ADR-0391	Read-only Cluster Operator Context Readiness	Accepted
ADR-0392	Plugin Package Automation 安全隔离原子撤回	Accepted

规则

ADR 只决定一个边界清晰的问题。
ADR 必须说明上下文、决策、替代方案、影响和验证方式。
Accepted ADR 不直接改写历史；改变决策时新增 ADR 并标记 supersedes。
ADR 不能静默违反主 RFC 的核心决策和架构不变量。
业务实现 PR 应链接对应 ADR，并用测试证明关键约束。